RE & code
Here is a blogpost I created at work regarding a campaign leveraging IQY attachments for the delivery of Paradise Ransomware.
IQY files and Paradise Ransomware